Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 41,670
Reset filtersFlo Forms <= 1.0.40 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Affiliate Links <= 0.1.1 - Reflected Cross-Site Scripting
Constant Contact Forms <= 2.0.2 - Missing Authorization via constant_contact_privacy_ajax_handler
WP Matterport Shortcode <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Zip Recipes <= 8.0.7 - Cross-Site Request Forgery
CHP Ads Block Detector <= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
breadcrumb simple <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
CHP Ads Block Detector <= 3.9.4 - Missing Authorization to Plugin Settings Update
MasterStudy LMS <= 3.0.8 - Missing Authorization to Course Category Creation
MasterStudy LMS <= 3.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
NextGen GalleryView <= 0.5.5 - Reflected Cross-Site Scripting
myCred <= 2.5 - Cross-Site Request Forgery
Stock Manager for WooCommerce <= 2.10.0 - Cross-Site Request Forgery
Form Maker <= 1.15.16 - Missing Authorization in check_score
Fat Rat Collect <= 2.6.0 - Missing Authorization
Church Admin <= 3.7.29 - Reflected Cross-Site Scripting
MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
Recent Posts Slider <= 1.1 - Reflected Cross-Site Scripting
Password Protected <= 2.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.